Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/hmvmeXFvD9qZVeolmIKtp_04JJo.roa
File: hmvmeXFvD9qZVeolmIKtp_04JJo.roa (raw, json)
Hash identifier: uUoJ8PP6G7psmy5xAgDLUQe3kckCCzaiungEdt32Zws=
Subject key identifier: 86:6B:E6:79:71:6F:0F:DA:99:55:EA:25:98:82:AD:A7:FD:38:24:9A
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 018CCA2A180CA4E7C7B956E3640D80C57084
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/hmvmeXFvD9qZVeolmIKtp_04JJo.roa
Signing time: Tue 02 Jan 2024 12:33:25 +0000
ROA not before: Tue 02 Jan 2024 12:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15595
IP address blocks: 81.25.229.0/24 maxlen: 24
81.25.230.0/24 maxlen: 24
81.25.228.0/24 maxlen: 24
81.25.233.0/24 maxlen: 24
81.25.227.0/24 maxlen: 24
81.25.231.0/24 maxlen: 24
81.25.232.0/24 maxlen: 24
81.25.236.0/24 maxlen: 24
81.25.237.0/24 maxlen: 24
81.25.235.0/24 maxlen: 24
81.25.234.0/24 maxlen: 24
81.25.238.0/24 maxlen: 24
81.25.239.0/24 maxlen: 24
81.25.226.0/24 maxlen: 24
81.25.224.0/20 maxlen: 20
81.25.224.0/24 maxlen: 24
81.25.225.0/24 maxlen: 24
2a02:d300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:18:0c:a4:e7:c7:b9:56:e3:64:0d:80:c5:70:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Jan 2 12:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=866be679716f0fda9955ea259882ada7fd38249a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:c3:08:53:98:04:83:e9:8f:c8:66:ba:18:
55:61:90:7a:1a:2a:52:1c:63:80:42:74:89:d1:68:
a2:fa:5a:63:fe:69:f0:42:ae:41:b2:a6:81:51:da:
3a:8c:52:fc:9b:d6:26:ef:3b:3c:85:cd:c9:a1:9d:
c3:3b:ec:f8:44:d9:e3:ce:a6:39:97:c1:3c:0f:52:
20:2c:6b:99:b0:70:89:ea:cb:ab:65:8b:00:df:ec:
a5:5e:45:71:8e:81:ae:ee:f1:77:e6:48:97:3c:a4:
5c:0e:dc:cc:35:f9:d3:9f:a2:2a:bf:95:b5:22:55:
49:5d:d5:64:99:bd:17:3c:1a:2d:b0:77:2c:01:da:
1e:c8:9b:85:e3:ca:0e:91:cc:6b:f4:e4:d9:2a:e0:
81:8f:81:7c:f1:74:ab:30:29:94:ef:ae:b6:dd:86:
13:02:bd:6b:39:3e:04:6a:2e:62:ba:65:f6:b7:eb:
31:36:e4:4f:a2:21:0e:2b:9e:45:34:4d:8a:11:76:
af:d6:f8:b9:0f:cd:bb:b4:6e:0b:e0:a6:38:87:a8:
9e:5d:d4:63:97:ee:b7:3d:4a:9b:05:98:c9:38:f1:
8e:21:dc:e9:bd:41:a6:ee:eb:da:0e:e2:8e:ca:65:
cd:88:43:6c:e6:f1:d4:c5:0f:61:c9:0a:be:fb:54:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:E6:79:71:6F:0F:DA:99:55:EA:25:98:82:AD:A7:FD:38:24:9A
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/hmvmeXFvD9qZVeolmIKtp_04JJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.224.0/20
IPv6:
2a02:d300::/29
Signature Algorithm: sha256WithRSAEncryption
30:5d:62:27:e3:b0:10:3f:11:40:c8:03:78:df:f8:ef:f7:34:
b1:65:3d:b1:7c:bd:a4:54:7f:87:21:63:85:90:66:7c:e4:11:
fe:33:c9:07:b6:5a:f3:63:8a:fd:2e:55:29:66:f8:4d:bd:f8:
b2:09:aa:cf:3b:e0:6c:b4:10:dd:0d:bf:67:94:6b:c2:48:5b:
89:95:bb:7f:31:75:d4:13:c1:aa:09:ea:87:80:43:88:c6:7a:
bd:3a:15:d4:aa:6d:cf:96:f4:73:74:2a:23:98:b9:3b:cf:93:
1c:a0:c5:d5:e1:17:3c:51:1b:6c:61:8c:af:ce:ad:3e:f1:02:
f3:86:29:7e:d3:a2:d5:7d:f2:48:31:e7:0d:bf:44:7f:7d:d7:
5f:6c:76:aa:f6:33:08:a9:37:5a:43:02:11:59:ef:8a:a3:4d:
50:3c:5a:7c:26:98:94:53:7b:43:18:7e:f5:93:75:3c:ac:48:
d0:33:a8:a5:94:4c:07:39:84:57:01:7b:00:8b:ed:63:6b:ee:
d4:62:5e:5f:5b:9f:fa:18:ba:93:7d:13:17:eb:d3:02:94:7e:
43:a5:40:82:14:bf:12:3e:0a:7e:59:a9:c0:b3:ee:e0:07:25:
de:12:88:20:79:fa:75:80:f3:80:a6:79:50:56:92:83:4b:74:
f2:82:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:21 2024 by rpki-client on console-ams.rpki-client.org